What is the Healthsource Chiropractic Business Associate's responsibility regarding notifying entities that received erroneous or incomplete PHI?

According to Healthsource Chiropractic's 2025 Franchise Disclosure Document, the Business Associate has specific responsibilities regarding the notification of entities that received erroneous or incomplete Protected Health Information (PHI). The Business Associate must make reasonable efforts to notify persons, organizations, or other entities known to have received the erroneous or incomplete information. This includes other business associates who may have relied, or could foreseeably rely, on such information to the detriment of the individual patient. The Business Associate is also required to update this information when notified by the Covered Entity (the franchisee).

If the Business Associate receives a request for amendment to PHI directly from an individual patient, they must forward the request to the Covered Entity within ten (10) business days. However, the Covered Entity has the sole responsibility for determining whether to approve an amendment to PHI and to make such amendment. This division of responsibility ensures that the franchisee maintains control over decisions regarding PHI amendments while the Business Associate handles the administrative aspects of notification and forwarding requests.

This requirement ensures compliance with HIPAA regulations and protects patient privacy by correcting inaccurate information. For a Healthsource Chiropractic franchisee, this means implementing procedures to track and manage notifications related to erroneous or incomplete PHI, as well as promptly forwarding any amendment requests received directly from patients to Healthsource Chiropractic, LLC. Failing to comply with these requirements could result in breaches of patient confidentiality and potential legal repercussions.